SaveMyCert
Log in
5 of 5 free questions left today·for unlimited practice
SCS-C03 revision

Free SCS-C03 revision notes

The complete AWS Certified Security – Specialty study library — 16 lessons mapped to every domain and topic in the official exam guide. Free to read, no account needed.

Lessons
16
across 6 domains
Reading time
4 hrs
253 minutes in total
Exam
65 Qs
170 min · pass 750
Price
Free
no account required
Design and implement monitoring and alerting solutions for an AWS account or organization
Designing Security Monitoring and Alerting Across an AWS Organization16 min
Troubleshoot security monitoring, logging, and alerting solutions
Troubleshooting Security Monitoring, Logging, and Alerting on AWS14 min

Create a free account to track completed lessons, bookmark topics and see your exam readiness.

The SCS-C03 blueprint, domain by domain

AWS publishes exactly what the SCS-C03 tests and how much each part is worth. Here it is — every domain, its weight, the topics inside it, and the lessons that cover them.

Domain 1

Detection

16%
of the exam

Designing monitoring, alerting, and logging solutions across accounts and organizations, and troubleshooting them when they break.

3 topics in this domain
  • Design and implement monitoring and alerting solutions for an AWS account or organization
  • Design and implement logging solutions
  • Troubleshoot security monitoring, logging, and alerting solutions
3 lessons · 47 min of reading · 60 practice questionsStart this domain
Domain 2

Incident Response

14%
of the exam

Designing and testing incident response plans, and responding to security events with containment, forensics, and root cause analysis.

2 topics in this domain
  • Design and test an incident response plan
  • Respond to security events
2 lessons · 31 min of reading · 40 practice questionsStart this domain
Domain 3

Infrastructure Security

18%
of the exam

Security controls for network edge services, compute workloads, and network traffic — from WAF rules to hardened AMIs to segmentation.

3 topics in this domain
  • Design, implement, and troubleshoot security controls for network edge services
  • Design, implement, and troubleshoot security controls for compute workloads
  • Design and troubleshoot network security controls
3 lessons · 48 min of reading · 60 practice questionsStart this domain
Domain 4

Identity and Access Management

20%
of the exam

Authentication and authorization strategies for human, application, and system access — the heaviest-weighted domain on the exam.

2 topics in this domain
  • Design, implement, and troubleshoot authentication strategies
  • Design, implement, and troubleshoot authorization strategies
2 lessons · 33 min of reading · 40 practice questionsStart this domain
Domain 5

Data Protection

18%
of the exam

Encryption in transit and at rest, plus protecting confidential data, credentials, secrets, and cryptographic key materials.

3 topics in this domain
  • Design and implement controls for data in transit
  • Design and implement controls for data at rest
  • Design and implement controls to protect confidential data, credentials, secrets, and cryptographic key materials
3 lessons · 48 min of reading · 60 practice questionsStart this domain
Domain 6

Security Foundations and Governance

14%
of the exam

Multi-account strategy, secure and consistent deployment of cloud resources, and evaluating compliance across AWS environments.

3 topics in this domain
  • Develop a strategy to centrally deploy and manage AWS accounts
  • Implement a secure and consistent deployment strategy for cloud resources
  • Evaluate the compliance of AWS resources
3 lessons · 46 min of reading · 60 practice questionsStart this domain

How to revise for the SCS-C03

Reading every note front to back is the slowest way to pass. The exam is weighted, so your revision should be too — the blueprint above tells you exactly where the marks are.

Read in weight order, not page order

Identity and Access Management carries the most marks on the SCS-C03, so it earns the most of your attention. Work down the blueprint from the heaviest domain to the lightest rather than starting at domain 1 and grinding forward.

First pass for coverage, second pass for recall

Read each lesson once without stopping to memorise — you are building a map, not a memory. On the second pass, read only the "what's tested" and key-takeaway blocks. If a takeaway surprises you, that lesson goes back on the pile.

Turn takeaways into questions

Cover a lesson's key takeaways and try to say them out loud from the heading alone. Recall you can produce under your own steam is the only recall that survives a timed exam; recognition on a re-read is not the same thing.

Stop reading when practice, not the page count, says so

Finishing the notes is not the goal — scoring is. Move to SCS-C03 practice questions early, then come back to the exact lessons your wrong answers point at. That loop is worth far more than a third read-through.

Beyond the SCS-C03 notes

SCS-C03 revision notes: your questions

Yes. All 16 SCS-C03 lessons are readable in full without an account and without payment. Creating a free account adds progress tracking, bookmarks and a readiness score — it does not unlock extra reading.